Lucene search
+L

166541 matches found

Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•14 views

PT-2026-96896

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could result in arbitrary code execution within the context of the current user. This flaw can ...

10CVSS6.2AI score0.01248EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•7 views

PT-2026-96980

Name of the Vulnerable Software and Affected Versions Adobe Bridge affected versions not specified Description An out-of-bounds write issue exists that could allow arbitrary code execution in the context of the current user. This occurs when a user opens a malicious file, which is required for th...

7.8CVSS7.7AI score0.00256EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•15 views

PT-2026-96887

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 7.4.0 through 7.7.0 RTI Connext Professional versions 7.0.0 through 7.3.1.5 RTI Connext Professional versions 6.1.0 through 6.1.x RTI Connext Professional versions 6.0.0 through 6.0.x RTI Connext Professional...

8.3CVSS6.4AI score0.00426EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•20 views

PT-2026-96837

Name of the Vulnerable Software and Affected Versions Sentry versions 23.11.0 through 26.6.0 Description Sentry instances with the relocation feature enabled unsafely deserialize a legacy database field during the import of a user-supplied relocation archive. An authenticated user can craft a...

7.7CVSS6.3AI score0.00605EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•20 views

CVE-2026-76715: Channel Accessible by Non-Endpoint

A vulnerability in an administrative component of Analytics and Location Engine ALE is vulnerable to a man-in-the-middle MitM attack. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the affected applian...

7.1CVSS6.8AI score0.00259EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•28 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2023-000318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000318 advisory. Git is distributed revision control system. git log can display commits in an arbitrary format using its --format specifiers. This functionality is also exposed to g...

9.8CVSS9.1AI score0.44268EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•13 views

RHEL 9 : postgresql (RHSA-2026:69607)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69607 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

8.8CVSS8.2AI score0.00683EPSS
SaveExploits3References32
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•15 views

RHEL 7 : gstreamer1-plugins-base (RHSA-2026:69866)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69866 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...

7.8CVSS7.8AI score0.00238EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•17 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2026-090053)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090053 advisory. When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and...

8.8CVSS8.8AI score0.01647EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•10 views

RHEL 8 : postgresql:16 (RHSA-2026:69876)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69876 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

8.8CVSS8.2AI score0.00683EPSS
SaveExploits3References34
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•15 views

RHEL 8 : gstreamer1-plugins-base (RHSA-2026:70260)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:70260 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...

7.8CVSS7.8AI score0.00238EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•25 views

AlmaLinux 8 : postgresql:16 (ALSA-2026:69876)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69876 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrar...

8.8CVSS8.3AI score0.00683EPSS
SaveExploits3References18
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-79079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in CrossWire Xiphos = 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/gtk/menupopup.c components CVE-2026-79079...

7.8CVSS6.8AI score0.00191EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•8 views

PT-2026-97046

Name of the Vulnerable Software and Affected Versions openEQUELLA versions prior to 2026.1.0 Description An authenticated non-guest user can execute arbitrary code via Java deserialization at the '/invoker/' HTTP invoker endpoint. The issue occurs because the class-name denylist enforced by...

8.8CVSS6.5AI score0.00542EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•11 views

RockyLinux 8 : postgresql:16 (RLSA-2026:69876)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69876 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitra...

8.8CVSS8.3AI score0.00683EPSS
SaveExploits3References33
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•9 views

PT-2026-96977

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An Uncontrolled Recursion issue exists that could allow arbitrary code execution in the context of the current user. This occurs when a victim opens a malicious file, requiring user interactio...

7.8CVSS7.6AI score0.00293EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•14 views

PT-2026-96894

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could lead to arbitrary code execution within the context of the current user. This flaw ca...

10CVSS8.4AI score0.01248EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•12 views

CVE-2026-73369: Improper Control of Generation of Code

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS8.9AI score0.01248EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•11 views

PT-2026-96897

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could lead to arbitrary code execution within the context of the current user. This flaw ca...

10CVSS6.2AI score0.01248EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•16 views

CVE-2026-75721: Improper Control of Generation of Code

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS7AI score0.01248EPSS
SaveExploits0References3
Rows per page
Query Builder